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Abstract —We introduce two variants of computation tree 
logic CTL based on team semantics: an asynchronous one 
and a synchronous one. For both variants we investigate the 
computational complexity of the satisflability as well as the 
model checking problem. The satisfiability problem is shown to 
be EXPTIME-complete. Here it does not matter which of the 
two semantics are considered. Eor model checking we prove a 
PSPACE-completeness for the synchronous case, and show P- 
completeness for the asynchronous case. Eurthermore we prove 
several interesting fundamental properties of both semantics. 

I. Introduction 

Temporal logic can be traced back to the late 1950s when 
Prior considered more formally the interplay of time and 
modality [24]. Today it is a well-known and important logic 
in the area of computer science that has influenced the area 
of program verification significantly. Since the introduction 
of temporal logic a wide research field around temporal logic 
has emerged. The most seminal contributions in this field have 
been made by Kripke [16], Pnueli [22], Emerson, Clarke, and 
Halpern [7, 5] to name a few. 

In real life applications, especially in the field of pro¬ 
gram verification, computational complexity is of the greatest 
significance. In the framework of logic, the most important 
related decision problems are the satisfiability problem and 
the model checking problem. Erom a software engineering 
point of view the satisfiability problem can be seen as the 
question of specification consistency: The specification of 
a program is expressed via a formula of some logic (e.g., 
computation tree logic CTL). One then asks whether there 
exists a model that satisfies the given formula. Eor model 
checking an implementation of a system is depicted via a 
Kripke structure and a specification via a formula of some lo¬ 
gic. One then wants to know whether the structure satisfies the 
formula (i.e., whether the system satisfies the specification). 
The satisfiability problem for CTC is known to be EXPTIME- 
complete by Eischer and Ladner, and Pratt [8, 23] whereas the 
model checking problem has been shown to be P-complete by 
Clarke et al., and Schnoebelen [4, 25]. 

Team semantics was introduced to the framework of first- 
order logic by Hodges [11] in the late 1990s. Subsequently 
Vaananen adopted the notion of a team as a core notion, first, 
for his (first-order) dependence logic [27] and later, in the 


framework of modal logic, for modal dependence logic [29]. 
The fundamental idea behind team semantics is crisp. The 
idea is to shift from singletons to sets as satisfying elements of 
formulas. These sets of satisfying elements are called teams. In 
the team semantics of first-order logic formulas are evaluated 
with respect to first-order structures and sets of assignments. 
In the team semantics of modal logic formulas are evaluated 
with respect to Kripke structures and sets of worlds. 

Various logics with team semantics have been defined and 
investigated. Most of these logics are extensions of first-order, 
propositional, or modal logics with novel atomic propositions 
that describe properties of teams (e.g, inclusion, dependence, 
and independence). Modal dependence logic (AiVC) extends 
modal logic with propositional dependence atoms. A depend¬ 
ence atom, denoted by dep(pi,... g), intuitively states 

that (inside a team) the truth value of the proposition q is 
functionally determined by the truth values of the propositions 
Pi,... ,Pn. It was soon realized that AAVC lacks the ability 
to express temporal dependencies; there is no mechanism in 
M-VC to express dependencies that occur between different 
points of the model. This is due to the restriction that only 
proposition symbols are allowed in the dependence atoms of 
modal dependence logic. To overcome this defect Ebbing et al. 
[6] introduced the extended modal dependence logic {£MT>C) 
by extending the scope of dependence atoms to arbitrary 
modal formulas. Dependence atoms of £AAT>C are of the 
form dep(i^i,... pm 'fp), where pi,..., pn, ip are formulas of 
modal logic. 

In recent years the research around first-order and modal 
team semantics has been vibrant. See, e.g., [6, 9, 15] for related 
research in the modal context. While team semantics has been 
considered in the context of regular modal logic, to the best 
knowledge of the authors, this is the first article to consider 
team semantics for a more serious temporal logic. The only 
logic from this area which can express some temporal like 
properties is £Ai'DC. 

In this article we propose two team based variants of CTC: 
an asynchronous one and a synchronous one. We abandon 
the idea of defining semantics for CTC via pointed Kripke 
structures. Instead the semantics are defined via pairs (AT, T), 
where K is an ordinary Kripke structure and T, called a team 
of K, is a subset of the domain of K. We will then investigate 


these two natural variants of C7X lifted to team semantics. 

In the synchronous model we stipulate that the evolution 
of time is synchronous among all team members whereas in 
the asynchronous case we do not have this assumption. The 
main difference of these two approaches can be seen in the 
definitions of the semantics for the modal operator until (see 
Definition 3): Either the time is synchronous among all team 
members, and hence when we quantify over a time point in 
the future all team members will advance the same number of 
steps in the Kripke structure, or we consider an asynchronous 
model, where when we quantify over a future point each 
team member might advance a different number of steps. 
We then investigate the expressive powers and computational 
complexity of these formalisms. 

It remains to be seen whether the team-based semantics 
can be used to model computational phenomena arising in the 
context of parallel or distributed processes. Our logic should 
be viewed as a first adaptation of C7X in the context of team 
semantics. The next natural step is, of course, to add different 
dependency notions such as dependence and independence to 
the language. Describing dependency properties of computa¬ 
tions is of great interest directly motivated from the area of 
dependence logic. 

Related work. There exists an approach of multi-modal 
C7X, and one called alternating-time temporal logic ATC. 
The first is a variant of C7X with several agents acting 
asynchronously. The latter is an extension of C7X that is used 
to reason about several agents acting synchronously (general 
concurrent game structures) or asynchronously (turn-based 
structures). For the first see, e.g., the work of Agotnes et al. 

[1] . The second contribution is due to the work of Alur et al. 

[ 2 ] . 

Moreover a classification of the computational complexity 
of fragments of the satisfiability as well as the model checking 
problem of C7X by means of allowed Boolean operators 
and/or combinations of allowed temporal operators has been 
obtained recently [19, 3]. A survey on Kripke semantics 
with connections to several areas of logic, e.g., temporal, 
dependence, and hybrid logic can be found in a work of Meier 
et al. [20]. An automatic-theoretic approach to branching-time 
model checking has been investigated by Kupferman et al. 
[17]. For a temporal logic with team-style semantics see the 
work of Jamroga and Agotnes [14]. 

In the literature, a multitude of approaches for modeling 
different kind of computation (e.g., serial, parallel, and distrib¬ 
uted) have been considered. Also many natural connections to 
logic have been discovered. Some of these approaches deal 
directly with computational devices as in circuit complexity 
(for details see, e.g., [31]). Another approach of this kind is 
the introduction of a parallel random access machine (PRAM) 
by Immerman [12]. Fogical characterisations of complexity 
classes are investigated in the field of descriptive complexity 
theory. A multitude of natural characterisations are known 
(see, e.g., the book of Immerman [13] for further details). 
A connection between particular modal logics and distributed 
computing has been considered recently by Hella et al. [10]. 


They give a characterisation of constant time parallel compu¬ 
tation in the spirit of descriptive complexity. 

Results. We introduce two new variants of C7X based on 
team semantics: an asynchronous one and a synchronous one. 
We investigate the computational complexity of the satisfiab¬ 
ility and the model checking problem of these variants. For 
model checking the complexity differs with respect to these 
variants. In the asynchronous case we show that the complexity 
is P-complete and hence the same as for C7X by exploiting 
structural properties of the satisfaction relation. For synchron¬ 
ous semantics surprisingly the complexity becomes PS PACE- 
complete. Hence having synchronised semantics makes the 
model checking in this logic intractable under reasonable com¬ 
plexity separation assumptions. For the satisfiability problem 
we show that the complexity stays EXPTIME-complete (same 
as for C7X) independently on which semantics is used. 

Structure of the paper. In Section II we give syntax and 
semantics of two novel variants of computation tree logic CTC. 
In Section III we prove closure properties of the satisfaction 
relations of the two variants. Section IV deals with their 
expressive power. In Section V we completely classify the 
computational complexity of the satisfiability and the model 
checking problem with respect to both variants. Finally we 
present interesting further research directions and conclude. 

II. Preliminaries 

We start this section with a brief summary of the relevant 
complexity classes for this paper. We then define the syntax 
and semantics of computation tree logic CTC. We deviate from 
the existing literature by using a convention that is customary 
related to logics with team semantics: We define the syntax of 
CTC in negation normal form, i.e., we require that negations 
may appear only in front of proposition symbols. We then 
introduce two variants of CTC that are designed to model 
parallel computation. 

A. Complexity 

The underlying computation model is Turing machines. 
We will make use of the complexity classes P, PS PACE, 
and EXPTIME. All reductions in this paper are logspace 
many-to-one reductions, i.e., computable by a deterministic 
Turing machine running in logarithmic space. For a deeper 
introduction into this topic we refer the reader to the good 
book of Pippenger [21]. 

B. Temporal Logic 

Fet PROP be a finite set of proposition symbols. The set 
of all C7X-formulas is defined inductively via the following 
grammar: 

ip-.-.= p\ ^p\{ip Ap)\{py ip) \ PXp I P[‘p\}ip\ I P[<p\Nip], 

where P € {A, E} and p G PROP. We define the following 
usual shorthands: T := pV-'p, _L := pA^p, fp := [TU:/?], and 
Qtp := [(^W_L]. Note that the formulas are in negation normal 
form (NNF). This is not a severe restriction as transforming 




T\^EFp 



T^EFp 


Figure 1. Difference between asynchronous and synchronous semantics 
shown with respect to the formula EFp. 


a given formula into its NNF requires linear time in the input 
length. 

A Kripke structure K is a tuple {W, R, rj) where W is a 
finite, non-empty set of states, R: W xW is a total transition 
relation (i.e., for every w G W there is a w' GW such that 
wRw'), and p: W ^ is a labelling function. A path 

TT = 7r(l), 7r(2), ... is an infinite sequence of states 7r(i) G 
W such that 7r(i)i?7r(i + 1) holds. By n(r(;) we denote the 
(possibly infinite) set of all paths tt for which 7r(l) = w. 

Definition 1 (Semantics of CTC). Let K = {W, R, p) be a 
Kripke structure and w GW a state. The satisfaction relation 
1= for CTC is defined as follows: 


K,w \= p 
K,w \= ^p 
K,w \= (p A tp 
K,w \= (pV tp 
K,w \= PXp 
K,w \= 


iff p G p{w), 
iff p ^ piw), 

iff K,w \= p and K,w \= ip, 
iff K,w \= p or K,w \= Ip, 
iff Dtt G n(ri;) : K, tt{2) [= ip, 
iff Dtt G n(rt;)3fc € N : AT, 7r(k) j= ip and 
\/l <i < k : K, TT{i) \= p, and 
K,w \= P[p\Nip] iff Dtt G n('u;)Vi : K, 7r(i) \= p ov 
{3k gN : K, 7r{k) \= ip and 
< i < k : K, 7r(i) \= p), 


where P G {A, E} and D = 3 if P = E and D = V if P = A. 


Next we will introduce team semantics for CTC based on 
multisets. A multiset is a generalisation of the concept of a 
set that allows multiple instances of the same element in the 
multiset. We denote a multiset that has elements p, q, r, and 
r by ^p,q,r,r^. When fL is a set (or a multiset), we use 
T CW to denote that T is a multiset such that each element 
of T is also an element of W. If T, T' are multisets then TUT' 
denotes the multiset defined by the disjoint union of the two 
multisets T, T'. 


Definition 2 (Team). Let K = (W, R, p) be a Kripke 
structure. Any multiset T such that T \CW is called a team 
ofK. 

Next we define two semantics for CTC based on team 
semantics: an asynchronous one and a synchronous one. The 
difference can be seen in the clauses for until and weak until 
and is also depicted in Figure 1. 


Definition 3 (Synchronous and asynchronous team semantics). 
Let K = (W, R, p) be a Kripke structure, T = -Jfi,..., tn^ 
be a team of K, and p and ip be CTX-formulas. The synchron¬ 
ous satisfaction relation and the asynchronous satisfaction 


relation ^ for CTC are defined as follows. The following 
clauses are common to both semantics. In the clauses h 
denotes either or ^ . 


K, 

T 

h 

P 

iff 

Vtu GT : p G p{w). 

K, 

T 

h 

-.p 

iff 

Vw GT : p ^ viw)- 

K, 

T 

h 

p Alp 

iff 

K,T F p and K,T F ip. 

K, 

T 

h 

pW Ip 

iff 

3Ti LiT 2 = T such that 






K,TiF p and K, Ta h ip. 

K, 

T 

h 

EXp 

iff 

37rti e n(fi),..., 37rt„ € n(f„ 







K, 

T 

h 

AXp 

iff 

VtTti e n(fi),... ,V7rt„ G n(f„ 


v/ifi ^ 

l—ll<j<n iTTt^{2)l h Ip. 


For the synchronous semantics we have the following 
clauses, where P G {A, E}, and D = V if P = A, resp., D = 3 
if P = E. 

K,T\^P[p[jip] iff 

DTTti e n(fi),..., DTTt„ G n(f„): 

3kGN:K, □ {{iTt^ikn^iP and 

l<j<n 

\fl <i < k : K, y {{TTt^ (i) J ^ p. 

l<j<n 

K,T\^P[p\Nip] iff 
DjTti G n(fi),..., DTTt„ G n(f„) : 

T:K, y or 

l<j<n 

i3kGN:K, y iTTt^ikn^iP and 

l<j<n 

yi<i<k:K, y f7rt.(i)| 

l<j<n 

For the asynchronous semantics we have the following 
clauses, where P G {A, E}, and D = V if P = A, resp., D = 3 
if P = E. 

K,T^P[pUip] iff 

Dtti G n(fi),... ,DTTn G n(f„), 3ki,..., 3kn G N : 

K, y lTT:j{k:j)^pip and 

l<j<n 

VI < < fci,... ,V1 < < fc„ : AT, yS7rj(ij)| p. 

i<y<n 

K,TpP[p'^iP] iff 
Dtti G n(fi),... ,D7r„ e n(f„) : 

Vil,... ,Vi„ : AT, y {TTj{ij)}'^ p or 

l<j<n 

{3ki,...,3knGn-.K, y lTT,{k,)}fiPand 

l<j<n 

VI < ... ,Vl<i„<fc„:A:, yS7rj(ij)J p). 

l<j<n 

Observe that the Boolean connective V removes synchron- 
icity between the team members. 





III. Properties oe Asynchronous and Synchronous 
Semantics 

In the following section we investigate several properties 
of the asynchronous and synchronous satisfaction relations 
^ ^ . In particular, we will use them in the end to deduce 

a corollary for asynchronous semantics which shows the 
interplay with the usual C7X satisfaction relation. 

Observe that AT, T h _L holds if and only if T = 0. The 
proof of the following lemma then is very easy. 

Lemma 4 (Empty team property). The following holds for 
every Kripke model K and h in { ^ , |= }.• 

\- if holds for every CTC-formula ip. 

When restricted to singleton teams, the synchronous and 
asynchronous team semantics coincide with the traditional 
semantics of CTC defined via pointed Kripke models. 

Lemma 5 (Singleton equivalence). For every Kripke structure 
K = {W, R, if) and every world w € W the following 
equivalence holds: 

K, K, I K,w \= (fi. 

Proof It is straightforward to check that on singleton teams 
the synchronous semantics of until and weak until coincide 
with that of the asynchronized semantics. Since none of the 
clauses in the two semantics makes the size of teams grow, 
the equivalence (1) follows. 

Now turn to (2). Let K = {W, R, rf) be an arbitrary Kripke 
structure. We first prove the claim via induction on structure 
of p: 

Assume that is a (negated) proposition symbol p. Now 
K^w \= p 

iff p is (not) in r]{w') 

iff for all w' € it holds that p is (not) in ri(w') 
iff K, p. 

The case A trivial. For the V case, assume that p = if V ff. 
Now it holds that 

K,w \=ifV6 

iff K,w\=if or K,w\=9 
iff K, -Situs' '^ip or K, f res' 0 

iff {K, StuS” [= '‘P AT, 0 6*) or 

(AT, 0 ^ i/i and AT, 9) 

iff 3Ti UT 2 = IwI s.t. K,Ti\^iP and AT, T 2 ^ 6» 
iff K, -gurus’ [= lA V 0. 

Here the first equivalence holds by the semantics of dis¬ 
junction, the second equivalence follow by the induction 
hypothesis, the third via the empty set property, the fourth 
via the empty set property in combination with the semantics 
of “or”, and the last by the team semantics of disjunction. 


The cases for EX and AX, until and weak until are all 
similar and straightforward. We show here the case for EX. 
Assume p = EXif. Now K,w ^ EXif iff there exists a 
point TT G n(r(;) such that K,tt(2) ^ if. Now since trivially 

and since by the induction 
hypothesis AT, 7r(2) \= if iff K,^TT{2)^^if, the above is 
equivalent to AT, -g^tuJ EXif. □ 

Let h denote a team satisfaction relation. We say that h 
is downward closed if the following holds for every Kripke 
structure K, for every CTX-formula p, and for every team T 
and T' of AT: 

lfK,TE p and T' C T then AT, T' h p. 

The proof of the following lemma is analogous with the 
corresponding proofs for modal and first-order dependence 
logic (see [27, 29]). 

Lemma 6 (Downward closure). and are downward 
closed. 

Proof. We proof the claim for only. For the argument¬ 
ation is similar. The proof is by induction on the structure of 

p. 

Let AT = (IT, A, p) be an arbitrary Kripke structure and 
T' CT he some teams of AT. The cases for literals are trivial: 
Assume K,T E p. Then by definition p G p{w) for every 
w G T. Now since T' C T, clearly p G p{w) for every 
w G T'. Thus AT, T' h p. The case for negated propositions 
symbols is completely symmetric. 

The case for A is clear. For the case for p V if assume 
that K,T\^p\/if. Now by the definition of disjunction there 
exist Ti U r 2 = T such that K,Ti\f= p and AT, T 2 ]= if. By 
induction hypothesis it the follows that K,Ti Ci T' p and 
K, T 2 r]T' ^ if. Now since clearly T' = (Tinr')U(T 2 nr'), it 
follows by the semantics of the disjunction that K,T' pVif. 

Now consider PXp. Let T = -g^fi,..., fnj-, where n G 
N, and assume that K,T ^ PXp. We have to show that 
AT, T' PXp for every T' C T. By the semantics of PXp 
we have that 

DTTtj G n(fi),..., 7rt„ G n(f„) : AT, |J (2)3- p. (1) 

l<j<n 

It suffices to show that for every subteam T' = 
-g(si,..., SfcS" of T, with 1 <k <n, 

DtTsi G n(si),..., 7rs„ G n(sfc) : AT, |J f (2)3- 

l<j<k 

holds. But this follows from (1) by the induction hypothesis. 
The cases for U and W are analogous. □ 

In this article, we consider multisets of points as teams. 
Observe that with respect to the satisfaction relation the use 
of multisets has no real consequence. However this does not 
hold for all extensions of these variants (see, e.g., [28]). The 
proof of the following corollary is self-evident. The proof uses 
the fact that both satisfaction relations are downward closed. 



Corollary 7. Let ip be a CTC-formula, hG { , ^ }, K be a 

Kripke structure, T be a team of K, and T' be the underlying 
set of the multiset T. Then K,T \- p iff K,T' \- p. 

A team satisfaction relation h is said to be union closed if 
for every Kripke structure K, formula p, and teams T and T' 
of K, the following holds: 

If K,TV- p and K,T' h p then K,TUT' \- p. 

Lemma 8 (Union closure). ^ is union closed. 

Proof This property again can be shown via induction on 
structure on p. The interesting parts of the proof are the cases 
for the temporal operators P[<^Ui/'] and P[p\N'4)\. We will show 
the proof for P[p\)ip] only. The proof for W is completely 
analogous. Now let iT, T ^ P[(pU^/>] and if, T'^ P[(pU^/>]. 
For simplicity we show the result only for P = E. Let 
T = be a team. Then K,T^ E[(/3U'i/'] implies 

that there are paths tti G n(fi),..., 7r„ G n(f„) and 
natural numbers ki,... ,kn such that if, ip and 

for all 1 < ij < kj it holds that K, p for 

^ < j ^ n. Analogously let T' = fsi,...,SmS' be a 
team. Then if, T' ^ E[i^Ut/>] implies that there are paths -n'l G 
n(si), ..., TT^ G n(sm) and natural numbers k[,...,k'^ 
such that if, ^ f/j and for all 1 < i' < kl it 
holds that if, f 7r'(ij)§ ^ p for 1 < j < m. Thus clearly 
if, T U T' ^ E[(/?U'i/'] and the claim follows. □ 

Note that the semantics is not union closed due to the 
observation depicted in Figure 1. 

The previous lemmas lead to the following interesting 
corollary which allows one to consider only the elements of 
the team instead of the complete team together. This will later 
prove to be important in the classification of the complexity 
of the model checking problem for asynchronous semantics. 

Corollary 9. For every Kripke structure if = {W, R, rj) and 
every team T of K the following equivalence holds: 

K,Tfp'^ytGT:K,t^p. 

IV. Expressive power 

In this section, we discuss in more details the relation¬ 
ship between the expressive powers of team CTC with the 
synchronous semantics and team CTC with the asynchronous 
semantics. 

Definition 10. For each CTX-formula p, define 

:={(if,T) |if,r^^} and 

:={{K,T)\K,Tfp}. 

We say that p defines the class 3^“ in asynchronous se¬ 
mantics (of CTC). Analogously, we say that p defines the class 
in synchronous semantics (of CTC). A class 5^ of pairs 
of Kripke structures and teams is definable in asynchronous 
semantics (in synchronous semantics), if there exists some 


G CTC such that 3" = (3^ = ^^). Furthermore, for 

fc G N, define 

r/ := {iK,T) I if, and |r| < k}, and 

:={(if,T) |if,T^^and |T| < A:}. 

We say that p k-defines the class 5^“’* (resp., 5^^’^) in 
asynchronous (resp., synchronous) semantics (of CTC). The 
definition of k-definability is analogous to that of definability. 

Next we will show that there exists a class ^ which is 
definable in asynchronous semantics, but is not definable in 
synchronous semantics. 

Theorem 11. The class is not definable in synchronous 
semantics. 

Proof. For the sake of a contradiction, assume that p is 
such that 5^“ = S^lpp. Consider the following Kripke 
model if = (W,R,V), where W = {1,2,3,4}, R = 
1(1,4), (4,4), (2, 3), (3, 3)}, and V(p) = {1,3}. Clearly 
if, EFp and if, {^2§ EFp. Thus by our assump¬ 

tion, it follows that K,^f\^p and K,^2^'^p. From 
Corollary 9 it then follows that if, f 1, 25-But clearly 
if,{;i,2l^EFp. □ 

Corollary 12. For k > 1, the class is not k-definable in 
synchronous semantics. 

Conjecture 13. The class )?|pp is not definable in asynchron¬ 
ous semantics. 

Theorem 14. For every fc G N and p G CTC, the class 
is k-definable in asynchronous semantics. 

Proof. Fix A: G N and p G CTC. Define 
p' := Y p. 

l<i<k 

We will show that 3^“’^ = Let if be an arbitrary Kripke 
structure and T be a team of if of size at most k. Then it holds 

if, T ^ Vtp € T : K, f p 

Vtp GT : K, f ruj- [= p 
^ K,T^p'. 

The first equivalence follows by Corollary 9, the second by 
Lemma 5, and the last by the semantics of disjunction and the 
downward closure property. □ 

V. Complexity Results 

In this section we classify the problems with respect to the 
computational complexity. At first we start with the asynchron¬ 
ous semantics. We will begin with model checking and will 
finish with satisfiability. 

In the following we define the most important decision 
problems in these logics. 



Problem: MC“ 

Input: A Kripke structure K, a team T of AT, a 
formula ip € CTC. 

Question: ipl 

Problem: SAT“ 

Input: A formula ip € CTC. 

Question: Does there exists a Kripke structure K and 
a non-empty team T of K s.t. K,T^ pi 

Similarly we write MC^, resp., SAT® for the variants with 
synchronized semantics. 

A. Model Checking 

In this subsection we investigate the computational com¬ 
plexity of model checking. For usual CTC model checking 
the following proposition summarizes what is known. 

Proposition 15 ([4, 25]). Model checking for CTC formulas 
is P-complete. 

At first we investigate the case for asynchronous semantics. 
Through combinations of the previous structural properties of 
it is possible to show the same complexity degree. 

Theorem 16. MC“ is P-complete. 

Proof. The lower bound is immediate from usual CTL model 
checking by Proposition 15. For the upper bound we apply 
Corollary 9 and separately use for each member of the given 
team the usual CTL model checking algorithm. □ 

Now we turn to the model checking problem for syn¬ 
chronous semantics. Here we show that the problem becomes 
intractable under reasonable complexity class separation as¬ 
sumptions, i.e., P f PSPACE. The main idea is to exploit the 
synchronous semantics in a way to literally check in parallel all 
clauses for a given quantified Boolean formula for satisfiability 
for a set of relevant assignments. 

Theorem 17. MC® is PSP/KCP-hard. 

Proof. From Stockmeyer [26] we know that the validity prob¬ 
lem of closed quantified Boolean formulas (QBF-VAL) of 
the form 3a:iVa;2 • • • DxnF, where D = 3 if n is odd, resp., 
D = V if n is even, and F is in conjunctive normal form is 
PS PACE-complete. 

Let p := 3xi\/x 2 ■ ■ ■ C>Xn AI^i Vj=i be a closed quan¬ 
tified Boolean formula (QBF) and B = 3 if n is odd, resp., 
B = V if n is even. Now define the corresponding structure 
{W, R, if) as follows (also see Figure 2): 

n 

IF := U i{Wj' I 1 < j < A U I z < j < n + 4}) 

i=l 

U {wi I l<z<n + l}U I 1 < J < m} 

U {wT ,^ I 1 < j < m, 1 < z < 3,1 < A: < 2}, 


n 

u \ l<k<2,i<j<n + 3}) 

U{«,<4_i) I 1 < z < rz} 

U{(zi;°+i,zu°A I 1 < j < w} 

C I 1 <*< 3,1 <i< m} 

^ I 1 <z< 3,1 <j< to}, and 

1 ■= U {a;fe I 1 < A: 7 ^ z < n}) I 1 < z < rz} 

U {(w®V 4 . 2 > {3^*} 11 I l<A; 7 ^z<n})) | 1 <z<rz} 
U I = ^k} 

U {xk I Xk f var{£jp)}) | 1 < j < to, 1 < z < 3} 

11 I ~ 

U {xk I Xk f var(Aj_i)}) | 1 < J < w, 1 < z < 3}. 

Further set 

T-.= iwlf...,wlTw'i} and 

n 

p := EXAX ■ ■ ■ PX AXEX /\ EFxi, 

n i—1 

where P = E if rz is odd and P = A if rz is even. Let the 
reduction be defined as /: (p) i—>■ {{W,R,ri),T,p). 

In Figure 3 an example of the reduction is shown for the 
instance 3 xiVx 23 x 3 (a;i Vx 2 VT 3 ) A (TTVa ;2 Vxa) A(TTVTiV 
UT). Note that this formula is a valid QBF and hence belongs 
to QBF-VAL. The left three branching systems choose the 
values of the XiS. A decision for the left/right path can be 
interpreted as setting variable Xi to 1 / 0 . 

For the correctness of the reduction we need to show that 
p e QBF-VAL iff f{p) G MC®. 

“=J>”: Let p G QBF-VAL, p = 3xiix2 ■ ■ ■C>XnF, F = 
NiLi V^=i and let S' be a valid set of assignments with 
respect to 3 a;iVx 2 • • • Da;„. Now it holds that for every s G S 
that s 1= F holds. Choose an arbitrary such s G S. Note that 
the variables now can be seen as being existentially quantified 
with respect to every assignment in S (whereas strictly speak¬ 
ing some of them stem from a universal quantifier V, yet at the 
moment we consider only a single assignment). Denote with 
f{ip) = {{W, R,ri),T,p) the value of the reduction function 
and denote with K the structure {W,R,rj). 

Now we will prove that K,Tf=p. Observe that T = 
, • • •, tu}", zufS' by definition. For zu} there is no choice 
in the next rz steps defined by the prefix of p. For 
, ■ • ■, zz;}” we decide as follows depending on the assign¬ 
ment s. 

Note that during the evaluation of p w.r.t. T and K in the 
first rz CTC operators of p the AX operators are treated in 
the proof now as EX. This is because here we just have to 
decide with respect to the chosen assignment from S. Hence 
if s{xi) = 1 then choose in step z of this prefix from 



the successor world If s(xi) = 0 then choose 2 

instead. 

Now after n steps the current team T' then is U 

iWn+ 1,1 I s{xi) = 1,1 < z < nl U I s{xi) = 0,1 < 

z < zzj- (note that now the team completely agrees with the 
assignment s). In the next step the team branches now on all 
clauses of F and becomes | 1 < j < U 1 I 

s(xi) = 1,1 < z < n^- u ■Szu^!)- 2.2 I = 0,1 < z < rz|. 
Now continuing with an EX in ip the team members of the 
“formula” (we here refer to the elements f I 1 < J < ztiJ' 
of the team) have to decide for a literal which satisfies the 
respective clause. As s ^ this must be possible. W.l.o.g. 
assume that in clause Cj the literal ij satisfies Cj by s{£j) = 1 
for 1 < j < m (denote with s{£) the value 1 — s{x) if x is the 
corresponding variable to literal £). Let index(fj) G {1,2,3} 
denote the “index” of £j in Cj, i.e., the value z G {1, 2,3} such 
that £j = iij in F. Then we choose the world ^ as 

a successor from for 1 < j < m. 

For the (“variable” team members) f. with k G {1,2} 
we have no choice and proceed to f.. Now we have to 
satisfy the remainder of p which is Ar=i EFxj. Observe that 
for variable team members 1 has Xi labeled in the 
current world and not in the successor world z(;^Y 4 i’ he., Xi ^ 
Z7«V4.i)- 

Symmetrically this is true for the zu^l^g 2 worlds but Xi ^ 
z 7 (zuJ ^!)_3 2 ) Xi G rj{w^_^^ 2 )- Hence “staying” in the world 
(hence immediately satisfying the EFxi) means setting Xi to 
true by s whereas making a further step means setting Xi to 
false by s. 

Further observe for the formula team members we have 
depending on the value of s{£j) that x G z7(zz;°A3,index(rj),i) 
and^x i and x ^ 

^(w'n+a.index^Z,).!) and X G Z?(zZ;^A3.index(Z,).2) ^(A) = «■ 

Thus according to synchronous semantics the step depth w.r.t. 


a Xi have to be the same for every element of the team. Hence 
if we decided for the variable team member that s{xi) = 1 
then for the formula team members we cannot make a step 
to the successor world and therefore have to stay (similarly if 
s(xi) = 0 then we have to do this step). 

Note that this is not relevant for other states as there all 
variables are labelled as propositions and are trivially satisfied 
everywhere. Hence as £j |= Cj we have decided for the world 

^^^+3 2_index(Z ) ^ ~ 

s(£j) = 1. Hence K,T p. 

For the direction “<J=” observe that with similar arguments 
we can deduce from the “final” team in the end what has 
to be a satisfying assignment depending on the choices of 
zu ^+3 J, and k G {1,2}. Hence by construction any of these 
assignments satisfies F. Let again denote by S' a set of teams 
which satisfy AXEX A”=i according to the prefix of n CTC 
operators. Then define a set S' of assignments from S by get¬ 
ting the assignment s from the team f G S by setting s{xi) = 1 
if there is a world zu^Yi 1 in f and otherwise s{xi) = 0. Then 
it analogously follows that s \= F. S' also agrees on the 
quantifier prefix of p. Hence p G QBF-VAL. □ 

Theorem 18. MC® is in PS PACE. 

Proof. The following PSPAC E-algorithm solves MC®. The 
weak until cases are omitted as they can be defined analog¬ 
ously to the usual until cases and just use non-determinism to 
operate on the disjunction. 

The procedure s-check (see Algorithm 1) computes for 
a given Kripke structure K, a team T and a formula p if 
K,T^p. 

The correctness of the algorithm can be verified by induc¬ 
tion over the formula p as the different cases in the procedure 
s-check merely restate the semantical definition of our team 
logic. 



Figure 2. General view on the created Kripke structure in the proof of Theorem 17. 










For the case Lp = E[aU/3] by definition we need to check if 
there exists paths € n(fi),..., € n(f„) and a fc G N 

such that 

U and 

l<j<n 

'il <i < k : K, y {{7rt^ (i)J a. 

l<j<n 

The algorithm checks exactly the same conditions, but guesses 
the number k only up to |kF|I^L We show this is sufficient 
as the size |r| of the team does not increase in the process 
of evaluation. Suppose such a k exists but k > then 

there are ii < 12 such that all paths have a loop from ii to 
* 2 , i-e., 

VI < j < n : TTt^. (ii) = (12). 

We can generate a new set of paths G n(fi),... G 
n(f„) by removing the loop from i\ to 12 and let k! = k — i 2 + 
ii. Then these paths and the new constant k' also satisfy the 
conditions above. We can repeat this process until we gained 
a constant less then Hence if there is such a A: we can 

find a k < |kF|I^L 

Similar it suffices in the case (p = A[aU/3] to verify that /3 
is satisfied after at most |fF|l'^l steps. 

Also our algorithm runs in alternating polynomial time; 
the nondeterministic choices occur in the Until-case and in 
the procedure succ, where they correspond to existential 
and universal quantifications. Hence the algorithm runs in 
PSPACE. □ 

Corollary 19. MC^ is PSP ACE-complete. 

B. Satisfiability 

The following proposition summarises what is known about 
usual C7X satisfiability. 

Proposition 20 ([8, 23]). Satisfiability for CTC formulas is 
EXPTIM E-complete. 


For the team based variants of computation tree logic 
the computational complexity of the satisfiability problem is 
proven to be the same as for CTC. 

Theorem 21. SAT^ and SAT“ are EXPTI ME-compZefe. 

Proof. In both cases the problem merely asks whether there 
exists a Kripke structure K and a non-empty team T of K such 
that K,T^ ip, resp., AT, T, 1 ^ for given formula (p G CTC. 
By Lemma 6 we can just quantify for a singleton sized team, 
i.e., |r| = 1. By Lemma 5 we immediately obtain the same 
complexity bounds from usual satisfiability for CTC. Hence 
Proposition 20 applies and proves the theorem. □ 

VI. Future Work 

The tautology or validity problem for this new logic is quite 
interesting and seems to have a higher complexity than the 
related satisfiability problem. However we have not been able 
to prove a result yet. Formally the corresponding problems are 
defined as follows: 


Problem: 

VAL“ 

Input: 

A formula ip G CTC. 

Question: 

Does K,T^ ip hold for every Kripke 


structure K and every team T of K1 


Problem: 

VAL^ 

Input: 

A formula ip G CTC. 

Question: 

Does K^T'^ip hold for every Kripke 


structure K and every team T of K1 


In the context of team-based propositional and modal lo¬ 
gics the computational complexity of the validity problem 
has been studied by Virtema [30]. Virtema shows that the 
problem for propositional dependence logic is NEXPTIME- 
complete whereas for (extended) modal dependence logic it is 
NEXPTIME-hard and in NEXPTIME^'". 

One might also consider to settle 13 which we left open. 
Intuitively here the weak until operator makes the argument 
quite difficult to prove due to the possibility of infinite 
computation paths (informally hence the G operator). 



Figure 3. Example structure built in proof of Lemma 17. 
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Algorithm 1: Model checking algorithm for MC® 

Procedure succ (Structure K = (W,R,ri), team T) ; 
guess a multiset T' with |r| = \T'\ s.t. f.a. t GT there 
exists a u € T' with tRu and vice versa; 

return T'; 

Procedure s-check (Kripke structure K = (W,R,ri), 

team T, formula ip) ; 

if = T then return 1; 

if = _L then return T = 0?; 

it ip = p then return Viu gT : p G ri(w)l\ 

it ip = ^p then return \/w gT ■. p ^ ri(w)l\ 

it ip = a f\ P then 

1^ return s-check (AT, T, a) As-check (AT, T,/3) 

it ip = ay P then 

guess Ti U T 2 = T; 

return s-check (K, Ti, a) As-check (K, T 2 , /3) ; 

if 1 ^ = EXa then 

T' ^succ {K,T ); 
return s-check (AT, T', a) ; 

if 1 ^ = AXa then 

bool u -i— 1; 

for every possible guess T' <— succ {K,T) do 
|_ V vAs-check (K, T', a) ; 

return u; 

if = E[q;U/ 3] then 

guess a binary number k G [0, u ^ 1, and 

Tlast T', 

for 1 < 7 < fc do 

T' t-SUCC {K,Tiast) ; 

V G- vAs-check (K, T' ,a ); 

Tiast T' and z -i— 7 + 1; 

_ if 7 = fc then Tiast •(-succ (AT, TiasP ; 

return uAs-check (K, Tiast, P) ; 

if = A[aU/3] then 

let Tiast ^ T, and bool v t— 1; 

for 1 < 7 < do 

for every possible guess T' ^succ (K,T) do 
Tiast T', and guess A G {0,1}; 
if A then v g- zzAs-check (K, T', a) ; 
else return uAs-check (K,T',P) ; 

7^7 + 1; 

return uAs-check (K,T',P) ; 


Dependence logic (construed broadly) is a prospering area 
in logic in which team semantics has been extensively studied. 
The logic itself was introduced by Vaananen [27] in 2007 
with an aim to express dependencies between variables in sys¬ 
tems. Subsequently multitude of related formalisms have been 
defined and studied. There are several fruitful applications 
areas for these formalisms, e.g., computational biology, data¬ 
base systems, social choice theory, and cryptography. A modal 
logic variant of dependence logic was defined by Vaananen 
[29] in 2008. Modal dependence logic is an extension of 
modal logic with novel atomic propositions called dependence 
atoms. A dependence atom, denoted by dep(pi,... ,p„, g), 
intuitively states that (inside a team) the truth value of the 
proposition q is functionally determined by the truth values of 
the propositions pi,... ,pn- The introduction of dependence 
atoms (or some other dependency notions from the field 
of dependence logic) into our team-based CTC might lead 
to a flexible and elegant variant of computation tree logic 
which can express several interesting dependency properties 
relevant to practice. Formally dependence atoms are defined 
in our formalism as follows. If AT = (W, R, p) is a Kripke 
structure, T = ffi,...,is a team, and ipi,... ,ipn are 
CTC formulas, then K,T \= dep(i^i,..., i^„) holds if and 
only if 

n — 1 

Vfi, f2 € T : f\ {K, Ih} \= (pi K, •8;f2S- h Ti) 

implies {K, iTj \= (/?„ K, 1^23- 1= Tn)- 

The above is the definition of what is known as modal de¬ 
pendence atoms of extended modal dependence logic SAdVC 
introduced by Ebbing et al. [6]. 

It is well-known that there are several alternative inputs to 
consider in the model checking problem. In general, a model 
and a formula are given, and then one needs to decide whether 
the model satisfies the formula. System complexity considers 
the computational complexity for the case of a fixed formula 
whereas specification complexity fixes the underlying Kripke 
structure. We considered in this paper the combined complexity 
where both a formula and a model belong to the given input. 
Yet the other two approaches might give more specific insights 
into the intractability of the synchronous model checking case 
we investigated. In particular the study of so-to-speak team 
complexity, where the team or the team size is assumed to be 
fixed, might as well be of independent interest. 

Finally this leads to the consideration of different kinds of 
restrictions on the problems. In particular for the quite strong 
PS PAC E-completeness result for model checking in synchron¬ 
ous semantics it is of interest where this intractability can be 
pinned to. Hence the investigation of fragments by means of 
allowed temporal operators and/or Boolean operators will lead 
to a better understanding of this presumably untamable high 
complexity. 

VII. Conclusion 

In this paper we studied computation tree logic in the 
context of team semantics. We identified two alternative defin- 



itions for the semantics: an asynchronous one and a synchron¬ 
ous one. The intuitive difference between these semantics is 
that, in the latter semantics the flow of time can be seen as 
synchronous inside a team, whereas in the former semantics 
the flow of time inside a team can differ. This difference 
manifests itself in the semantical clauses for the eventuality 
operator until as well as for the temporal operator/MtMre. From 
satisfiability perspective the complexity of the new logics 
behave similar as C7X. One might consider a different kind 
of satisfiability question: given a formula (p and a team size k, 
does there exist a Kripke structure K and a team T of size k 
in K such that K,T^ p, resp., K,T\= pi However the use 
of the multiset notion easily tames this approach and then lets 
us conclude with the same result as in Theorem 21. 

For model checking the complexity of the synchronous case 
differs to the one of usual C7X. This fact stems from the 
expressive notion of synchronicity between team members 
and is in line with the results of Kupferman et al. [17]. 
We prove PSPACE-completeness. The lower bound follows 
by a reduction from QBF validity and the upper bound via 
a Ladner-style algorithm [18]. It might first seem that the 
complexity of the asynchronous case would also differ with 
the quite efficient C7X case (which is P-complete). However 
the use of closure properties of the relation enables us to 
separately check, for each team member, whether it is satisfied 
in the given structure. Thus a multiple application of the usual 
CTC model checking algorithm thereby establishes the same 
upper bound. 

Acknowledgements 

The second author is supported by DFG grant ME 4279/1- 
1. The third author supported by Jenny and Antti Wihuri 
Foundation. We thank the anonymous referees for their helpful 
comments. 

Reeerences 

[1] T. Agotnes, W. van der Hoek, J. A. Rodriguez-Aguilar, 
C. Sierra, and M. Wooldridge. Multi-modal CTL: Com¬ 
pleteness, complexity and an application. Studio Logica, 
92(1): 1-26, 2009. 

[2] R. Alur, T. A. Henzinger, and O. Kupferman. 
Alternating-time temporal logic. Journal of the ACM, 
49:672-713, 2002. 

[3] O. Beyersdorff, A. Meier, M. Mundhenk, T. Schneider, 
M. Thomas, and H. Vollmer. Model Checking CTL is 
Almost Always Inherently Sequential. Logical Methods 
in Computer Science, 7(2:12), 2011. 

[4] E. Clarke, E. Allen Emerson, and A. Sistla. Automatic 
verification of finite-state concurrent systems using tem¬ 
poral logic specifications. ACM Transactions on Pro¬ 
gramming Languages and Systems, 8(2):244-263, 1986. 

[5] E. M. Clarke and E. A. Emerson. Design and synthesis of 
synchronisation skeletons using branching time temporal 
logic. In Logic of Programs, volume 131 of Lecture Notes 
in Computer Science, pages 52-71. Springer Verlag, 
1981. 


[6] J. Ebbing, L. Hella, A. Meier, J.-S. Muller, J. Virtema, 
and H. Vollmer. Extended Modal Dependence Logic 
SJCIVC. In Proc. 20th WoLLIC, pages 126-137, 2013. 

[7] E. Allen Emerson and J. Y. Halpern. Decision procedures 
and expressiveness in the temporal logic of branching 
time. Journal of Computer and System Sciences, 30(1): 
1-24, 1985. 

[8] M. J. Eischer and R. E. Ladner. Propositional modal logic 
of programs. Journal of Computer and System Sciences, 
18:194-211, 1979. 

[9] L. Hella, K. Luosto, K. Sano, and J. Virtema. The ex¬ 
pressive power of modal dependence logic. In Advances 
in Modal Logic, 2014. 

[10] L. Hella, M. Jarvisalo, A. Kuusisto, J. Laurinharju, 
T. Lempiainen, K. Luosto, J. Suomela, and J. Virtema. 
Weak models of distributed computing, with connections 
to modal logic. DISTRIB COMPUT, 28(l):31-53, 2015. 

[11] W. Hodges. Compositional semantics for a language of 
imperfect information. Logic Journal of the IGPL, 1997. 

[12] N. Immerman. Expressibility and parallel complexity. 
Siam Journal on Computing, 18(3):625-638, 1989. 

[13] N. Immerman. Descriptive Complexity. Springer, 1999. 

[14] W. Jamroga and T. Agotnes. Constructive knowledge: 
What agents can achieve under incomplete information. 
Journal of Applied Non-Classical Logics, 17(4):423^75, 
2007. 

[15] J. Kontinen, J.-S. Muller, H. Schnoor, and H. Vollmer. 
Modal independence logic. In Advances in Modal Logic, 
2014. 

[16] S. Kripke. Semantical considerations on modal logic. 
In Acta philosophica Fennica, volume 16, pages 84-94, 
1963. 

[17] O. Kupferman, M.Y. Vardi, and P. Wolper. An automata- 
theoretic approach to branching-time model checking. 
Journal of the ACM, 47(2):312-360, 2000. 

[18] R. Ladner. The computational complexity of provability 
in systems of modal propositional logic. SIAM Journal 
on Computing, 6(3):467^80, 1977. 

[19] A. Meier, M. Mundhenk, M. Thomas, and H. Vollmer. 
The Complexity of Satisfiability for Eragments of CTL 
and CTL*. International Journal of Foundations of 
Computer Science, 20(05):901-918, 2009. 

[20] A. Meier, J.-S. Muller, M. Mundhenk, and H. Vollmer. 
Complexity of Model Checking for Logics over Kripke 
models. Bulletin of the EATCS, 108:49-89, 2012. 

[21] N. Pippenger. Theories of Computability. Cambridge 
University Press, Cambridge, 1997. 

[22] A. Pnueli. The temporal logic of programs. In Proc. 
FOCS, pages 46-57. IEEE Comp. Soc. Press, 1977. 

[23] V. R. Pratt. A near-optimal method for reasoning about 
action. Journal of Computer and System Sciences, 20(2): 
231-254, 1980. 

[24] A. N. Prior. Time and Modality. Clarendon Press, Oxford, 
1957. 

[25] P. Schnoebelen. The complexity of temporal logic model 
checking. In Advances in Modal Logic, volume 4, pages 



393^36, 2002. 

[26] L. J. Stockmeyer. The polynomial-time hierarchy. The¬ 
oretical Computer Science, 3:1-22, 1977. 

[27] J. Vaananen. Dependence Logic. Cambridge University 
Press, 2007. 

[28] J. Vaananen. The logic of approximate dependence. 
CoRR, arXiv: 1408.4437, 2007. 

[29] J. Vaananen. Modal Dependence Logic. In New Per¬ 
spectives on Games and Interaction. Amsterdam Univer¬ 
sity Press, Amsterdam, 2008. 

[30] J. Virtema. Complexity of validity for propositional 
dependence logics. In Proc. 5th GandALF, 2014. 

[31] H. Vollmer. Introduction to Circuit Complexity - A Uni¬ 
form Approach. Texts in Theoretical Computer Science. 
Springer Verlag, Berlin Heidelberg, 1999. 



